Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/536b956db0566c0e9d0fa9b9b3d29e8ac6f855ee.roa
File:                     536b956db0566c0e9d0fa9b9b3d29e8ac6f855ee.roa (raw, json)
Hash identifier:          qdA3CSeG+CpnGCt0NC/HC2B4vvCwQWV3JKClfdrJlso=
Subject key identifier:   7A:3A:6A:FA:5D:D4:91:B9:08:C2:D8:CD:AC:D0:6C:57:D1:1B:55:C9
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DCB10
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/536b956db0566c0e9d0fa9b9b3d29e8ac6f855ee.roa
Signing time:             Wed 24 Mar 2021 14:34:58 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     27817
IP address blocks:        186.113.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903952 (0xdcb10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=536b956db0566c0e9d0fa9b9b3d29e8ac6f855ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c5:3e:35:87:d6:87:4f:d5:29:6f:45:22:23:
                    f0:18:88:58:1c:1c:46:99:e0:b5:cd:b0:76:e9:0d:
                    f8:06:10:f3:9a:f7:95:10:7a:32:1c:3a:22:74:7d:
                    ea:ab:ec:aa:95:da:68:d4:50:1b:fa:e8:5e:87:1b:
                    76:87:a6:11:de:4a:68:fd:65:30:99:e6:0a:55:46:
                    b5:f3:1d:b5:2b:00:1a:99:b8:c0:01:4e:52:9b:3b:
                    b4:25:9a:4f:65:6d:3b:fa:88:38:25:89:23:c4:73:
                    ae:14:92:20:83:5a:ac:c0:53:99:a2:11:cf:15:d2:
                    91:09:a3:48:2d:c6:bf:36:c6:1b:ad:53:72:2a:ae:
                    95:eb:14:8a:27:58:8b:0c:62:36:75:90:16:74:59:
                    f3:4d:3b:5a:38:44:56:3c:5f:f1:2d:b3:af:d0:6c:
                    72:28:35:88:a0:ef:98:75:e9:92:fc:21:bd:8b:ba:
                    d4:9c:8c:4c:24:e1:7c:fe:84:3f:22:3e:e2:e7:19:
                    a4:88:3c:9d:ea:d4:d4:e5:38:ae:e1:0b:2f:7b:a3:
                    31:69:e9:13:2b:9b:1b:4b:e2:23:c7:be:3a:44:79:
                    49:5a:55:e4:d1:1e:6d:46:64:85:9e:85:4b:58:83:
                    e2:1a:27:47:61:38:44:ac:ca:59:e3:67:55:38:15:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:6A:FA:5D:D4:91:B9:08:C2:D8:CD:AC:D0:6C:57:D1:1B:55:C9
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/536b956db0566c0e9d0fa9b9b3d29e8ac6f855ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:b3:bc:a1:0e:14:a8:77:7c:d6:1c:a2:83:46:dd:69:12:ea:
         f1:09:9a:d3:d7:92:5e:18:01:08:da:85:ca:f2:a6:22:09:0b:
         8c:99:3e:b4:0e:0c:85:23:79:c0:70:55:42:bb:b8:b6:ff:8e:
         03:1f:d5:bc:7a:05:15:49:a3:53:3a:31:ad:32:af:36:88:f4:
         1f:01:c4:e0:b1:65:cc:fc:e9:80:75:69:9d:42:bc:83:cf:60:
         12:9a:0e:db:8c:47:be:f8:ef:f0:49:3d:a5:dd:c7:b9:ce:5d:
         5a:fd:4a:43:e6:fc:e1:85:1d:86:38:43:3f:7c:d4:e5:3a:5d:
         2c:a7:38:8f:7a:00:d4:97:9b:d6:9e:44:55:67:da:e8:8e:90:
         4c:30:bf:1b:11:30:88:85:8e:6f:6f:05:d0:1f:83:2d:a3:e6:
         83:24:39:5f:29:02:61:98:ef:01:c4:61:13:f0:bf:e9:3b:bf:
         1e:15:fe:f9:32:c2:75:a4:77:93:60:d1:5a:a9:0e:98:7e:8e:
         e3:7d:4c:d6:68:39:35:41:85:09:08:31:9a:cb:3a:ff:1d:5b:
         de:91:24:61:7b:76:51:d6:f1:6b:e6:eb:95:6e:76:70:00:a8:
         02:f4:bf:57:1b:a8:ee:b0:30:a0:d8:2a:e5:0e:61:3b:ed:fd:
         78:0d:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----